General

  • Target

    2196-54-0x0000000000230000-0x0000000000256000-memory.dmp

  • Size

    152KB

  • MD5

    b48633c9fb15d302d0c999ba681f4037

  • SHA1

    5b6f1a0e5a40796c48168e75a6840eef936e6293

  • SHA256

    346307926d8fbe0f0f2375ce4af4699cd6050643df8274eeb5bc3f040cc958c1

  • SHA512

    e59c143a7e6e22db103c1594a04612aa341473754dc355ba5ff75ebbf6397036f9a0951d601139249dd1e15cb28306029a19234cdde0e77919730c35226cee92

  • SSDEEP

    1536:2aCGcnVHT1u/o3Q5O6+f7NWy9Fu/OYmtZhZja9bV7e/8H72HsYgibfbFDKsRq:zNcZZgKjNWgurm90NU0HfYgafJlq

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

YT&TEAM LOGS

C2

176.123.9.85:16482

Attributes
  • auth_value

    63cc484234216dace4114bc03617721b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2196-54-0x0000000000230000-0x0000000000256000-memory.dmp
    .exe windows x86


    Headers

    Sections